core-admin/dom0/qvm-tools/qvm-prefs

#!/usr/bin/python2.6
#
# The Qubes OS Project, http://www.qubes-os.org
#
# Copyright (C) 2010  Joanna Rutkowska <joanna@invisiblethingslab.com>
#
# This program is free software; you can redistribute it and/or
# modify it under the terms of the GNU General Public License
# as published by the Free Software Foundation; either version 2
# of the License, or (at your option) any later version.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with this program; if not, write to the Free Software
# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA  02110-1301, USA.
#
#

from qubes.qubes import QubesVmCollection
from qubes.qubes import QubesVmLabels
from qubes.qubes import QubesHost
from qubes.qubes import qubes_kernels_base_dir
from optparse import OptionParser
import subprocess
import os
import sys
import re

def do_list(vm):
    label_width = 18
    fmt="{{0:<{0}}}: {{1}}".format(label_width)

    print fmt.format ("name", vm.name)
    print fmt.format ("label", vm.label.name)
    print fmt.format ("type", vm.type)
    if vm.template_vm is not None:
        print fmt.format ("template", vm.template_vm.name)
    if vm.netvm_vm is not None:
        print fmt.format ("netvm", vm.netvm_vm.name)
    print fmt.format ("updateable?", vm.is_updateable())
    print fmt.format ("installed by RPM?", vm.installed_by_rpm)
    print fmt.format ("dir", vm.dir_path)
    print fmt.format ("config", vm.conf_file)
    print fmt.format ("pcidevs", vm.pcidevs)
    if vm.template_vm is None:
        print fmt.format ("root img", vm.root_img)
    if vm.is_template():
        print fmt.format ("root COW img", vm.rootcow_img)
    if vm.template_vm is not None:
        print fmt.format ("root img", vm.template_vm.root_img)
    if hasattr(vm, 'volatile_img') and vm.volatile_img is not None:
        print fmt.format ("root volatile img", vm.volatile_img)

    if hasattr(vm, 'private_img') and vm.private_img is not None:
        print fmt.format ("private img", vm.private_img)
    print fmt.format ("vcpus", str(vm.vcpus))
    print fmt.format ("memory", vm.memory)
    if hasattr(vm, 'maxmem'):
        print fmt.format ("maxmem", vm.maxmem)
    print fmt.format ("MAC", "%s%s" % (vm.mac, " (auto)" if vm._mac is None else ""))

    if hasattr(vm, 'kernel'):
        if vm.template_vm is not None:
            print fmt.format ("kernel", "%s (from template)" % vm.kernel)
        elif vm.uses_default_kernel:
            print fmt.format ("kernel", "%s (default)" % vm.kernel)
        else:
            print fmt.format ("kernel", vm.kernel)

    if hasattr(vm, 'kernelopts'):
        if vm.uses_default_kernelopts:
            print fmt.format ("kernelopts", "%s (default)" % vm.kernelopts)
        else:
            print fmt.format ("kernelopts", vm.kernelopts)

    if hasattr(vm, 'drive'):
        print fmt.format("drive", str(vm.drive))

def set_label(vms, vm, args):
    if len (args) != 1:
        print >> sys.stderr, "Missing label name argument!"
        exit (1)

    label = args[0]
    if label not in QubesVmLabels:
        print >> sys.stderr, "Wrong label name, supported values are the following:"
        for l in QubesVmLabels.values():
            print >> sys.stderr, "* {0}".format(l.name)
        exit (1)

    vm.label = QubesVmLabels[label]

def set_memory(vms, vm, args):
    if len (args) != 1:
        print >> sys.stderr, "Missing memory argument!"
        exit (1)

    vm.memory = int(args[0])

def set_maxmem(vms, vm, args):
    if len (args) != 1:
        print >> sys.stderr, "Missing maxmem argument!"
        exit (1)

    vm.maxmem = int(args[0])

def set_mac(vms, vm, args):
    if len (args) != 1:
        print >> sys.stderr, "Missing MAC argument!"
        exit (1)

    if not re.match("[0-9a-fA-F:]{17}|auto", args[0]):
        print >> sys.stderr, "Invalid MAC argument!"
        print >> sys.stderr, "Possible values:"
        print >> sys.stderr, "1) auto"
        print >> sys.stderr, "2) MAC in format: XX:XX:XX:XX:XX:XX"
        exit (1)

    mac = args[0]
    if mac == "auto":
        mac = None
    vm.mac = mac

def set_pcidevs(vms, vm, args):
    if len (args) != 1:
        print >> sys.stderr, "Missing pcidevs argument!"
        exit (1)

    vm.pcidevs = list(eval(args[0]))

def set_netvm(vms, vm, args):
    if len (args) != 1:
        print >> sys.stderr, "Missing netvm name argument!"
        print >> sys.stderr, "Possible values:"
        print >> sys.stderr, "1) default"
        print >> sys.stderr, "2) none"
        print >> sys.stderr, "3) <vmaname>"
        return

    netvm = args[0]
    if netvm == "none":
        netvm_vm = None
        vm.uses_default_netvm = False
    elif netvm == "default":
        netvm_vm = vms.get_default_netvm_vm()
        vm.uses_default_netvm = True
    else:
        netvm_vm = vms.get_vm_by_name (netvm)
        if netvm_vm is None:
            print >> sys.stderr, "A VM with the name '{0}' does not exist in the system.".format(netvm)
            exit(1)
        if not netvm_vm.is_netvm():
            print >> sys.stderr, "VM '{0}' is not a NetVM".format(netvm)
            exit (1)
        vm.uses_default_netvm = False

    vm.set_netvm_vm(netvm_vm)
    if not vm.is_running():
        return
    # this can fail if VM was not connected to any NetVM
    subprocess.call(["xl", "network-detach", vm.name, "0"], stderr=subprocess.PIPE)
    if vm.netvm_vm is None:
        return
    if not vm.netvm_vm.is_running():
        subprocess.check_call(["qvm-start", vm.netvm_vm.name])
    # refresh IP, DNS etc
    vm.create_xenstore_entries()
    vm.attach_network(verbose = True)

def set_updateable(vms, vm, args):
    if vm.is_updateable():
        print >> sys.stderr, "VM '{0}' is already set 'updateable', no action required.".format(vm.name)
        return True

    if vm.is_running():
        print >> sys.stderr, "Cannot change 'updateable' attribute of a running VM. Shut it down first."
        return False

    if vm.is_appvm():
        # Check if the Template is *non* updateable...
        if not vm.template_vm.is_updateable():
            print >> sys.stderr, "VM '{0}': Setting 'updateable' attribute to True.".format(vm.name)
            vm.set_updateable()
        else:
            print >> sys.stderr, "The Template VM ('{0}') is marked as 'updateable' itself!".format(vm.template_vm.name)
            print >> sys.stderr, "Cannot make the AppVM updateable too, as this might cause COW-backed storage incoherency."
            print >> sys.stderr, "If you want to make this AppVM updateable, you must first make the Template VM nonupdateable."
            return False

    if vm.is_template():
        # Make sure that all the AppVMs are non-updateable...
        for appvm in vm.appvms.values():
            if appvm.is_updateable():
                print >> sys.stderr, "At least one of the AppVMs ('{0}') of this Template VM is also marked 'updateable'.".format(appvm.name)
                print >> sys.stderr, "Cannot make the Template VM updateable too, as this might cause COW-backed storage incoherency."
                print >> sys.stderr, "If you want to make this Template VM updateable, you must first make all its decedent AppVMs nonupdateable."
                return False


        print >> sys.stderr, "VM '{0}': Setting 'updateable' attribute to True.".format(vm.name)
        vm.set_updateable()
 
    return True

def set_nonupdateable(vms, vm, args):
    if not vm.is_updateable():
        print >> sys.stderr, "VM '{0}' is already set 'nonupdateable', no action required.".format(vm.name)
        return True

    if vm.is_running():
        print >> sys.stderr, "Cannot change 'updateable' attribute of a running VM. Shut it down first."
        return False

    if vm.is_netvm():
        print >> sys.stderr, "Why, on earth, would you want to make a NetVM 'nonupdateable'?"
        return False


    print >> sys.stderr, "VM '{0}': Setting 'updateable' attribute to False.".format(vm.name)
    vm.set_nonupdateable()
    return True

def set_kernel(vms, vm, args):
    if vm.template_vm is not None:
        print >> sys.stderr, "Cannot set kernel for template-based VM. Set it for template instead."
        return False

    if len (args) != 1:
        print >> sys.stderr, "Missing kernel version argument!"
        print >> sys.stderr, "Possible values:"
        print >> sys.stderr, "1) default"
        print >> sys.stderr, "2) none (kernels subdir in VM)"
        print >> sys.stderr, "3) <kernel version>, one of:"
        for k in os.listdir(qubes_kernels_base_dir):
            print >> sys.stderr, "  -", k
        return

    kernel = args[0]
    if kernel == "default":
        kernel = vms.get_default_kernel()
        vm.uses_default_kernel = True
    elif kernel == "none":
        kernel = None
        vm.uses_default_kernel = False
    else:
        if not os.path.exists(qubes_kernels_base_dir + '/' + kernel):
            print >> sys.stderr, "Kernel version {0} not installed.".format(kernel)
            exit(1)
        vm.uses_default_kernel = False

    vm.kernel = kernel

def set_template(vms, vm, args):
    if len (args) != 1:
        print >> sys.stderr, "Missing template name argument!"
        return False

    template_name = args[0];
    template_vm = vms.get_vm_by_name(template_name)
    if template_vm is None or template_vm.qid not in vms:
        print >> sys.stderr, "A VM with the name '{0}' does not exist in the system.".format(template_name)
        return False

    if not template_vm.is_template():
        print >> sys.stderr, "VM '{0}' is not a TemplateVM".format(template_name)
        return False

    print >> sys.stderr, "Setting template for VM '{0}' to '{1}'...".format (vm.name, template_name)
    vm.template_vm = template_vm
    return True

def set_vcpus(vms, vm, args):
    if len (args) != 1:
        print >> sys.stderr, "Missing vcpus count argument!"
        return False

    vcpus = int(args[0])
    if vcpus <= 0:
        print >> sys.stderr, "A vcpus count must be positive."
        return False

    qubes_host = QubesHost()
    if vcpus > qubes_host.no_cpus:
        print >> sys.stderr, "This host has only {0} cpus".format(ubes_host.no_cpus)
        return False

    print >> sys.stderr, "Setting vcpus count for VM '{0}' to '{1}'...".format (vm.name, vcpus)
    vm.vcpus = vcpus
    return True

def set_kernelopts(vms, vm, args):
    if len (args) != 1:
        print >> sys.stderr, "Missing kernel opts argument!"
        print >> sys.stderr, "Possible values:"
        print >> sys.stderr, "1) default"
        print >> sys.stderr, "2) <opts>"
        return False
    
    if args[0] == 'default':
        vm.uses_default_kernelopts = True
    else:
        vm.uses_default_kernelopts = False
        vm.kernelopts = args[0]

    return True

def set_name(vms, vm, args):
    if len (args) != 1:
        print >> sys.stderr, "Missing new name!"
        return False

    if args[0] == vm.name:
        return False
    vm.set_name(args[0])
    return True

def set_drive(vms, vm, args):
    if len (args) != 1:
        print >> sys.stderr, "Missing new drive content (file/device)!"
        return False

    vm.drive = args[0]
    return True

properties = {
    "updateable": set_updateable,
    "nonupdateable": set_nonupdateable,
    "pcidevs": set_pcidevs,
    "label" : set_label,
    "netvm" : set_netvm,
    "maxmem" : set_maxmem,
    "memory" : set_memory,
    "kernel" : set_kernel,
    "template" : set_template,
    "vcpus" : set_vcpus,
    "kernelopts": set_kernelopts,
    "name": set_name,
    "drive": set_drive,
    "mac": set_mac,
}


def do_set(vms, vm, property, args):
    if property not in properties.keys():
        print >> sys.stderr, "ERROR: Wrong property name: '{0}'".format(property)
        return False

    if not hasattr(vm, property):
        print >> sys.stderr, "ERROR: Property '{0}' not available for this VM".format(property)
        return False

    return properties[property](vms, vm, args)


def main():
    usage = "usage: %prog -l [options] <vm-name>\n"\
            "usage: %prog -s [options] <vm-name> <property> [...]\n"\
            "List/set various per-VM properties."

    parser = OptionParser (usage)
    parser.add_option ("-l", "--list", action="store_true", dest="do_list", default=False)
    parser.add_option ("-s", "--set", action="store_true", dest="do_set", default=False)

    (options, args) = parser.parse_args ()
    if (len (args) < 1):
        parser.error ("You must provide at least the vmname!")

    vmname = args[0]

    if options.do_list and options.do_set:
        print >> sys.stderr, "You cannot provide -l and -s at the same time!"
        exit (1)



    if options.do_set:
        qvm_collection = QubesVmCollection()
        qvm_collection.lock_db_for_writing()
        qvm_collection.load()
    else:
        qvm_collection = QubesVmCollection()
        qvm_collection.lock_db_for_reading()
        qvm_collection.load()
        qvm_collection.unlock_db()

    vm = qvm_collection.get_vm_by_name(vmname)
    if vm is None or vm.qid not in qvm_collection:
        print >> sys.stderr, "A VM with the name '{0}' does not exist in the system.".format(vmname)
        exit(1)

    if options.do_set:
        if len (args) < 2:
            print >> sys.stderr, "You must specify the property you wish to set..."
            print >> sys.stderr, "Available properties:"
            for p in properties.keys():
                if hasattr(vm, p):
                    print >> sys.stderr, "--> '{0}'".format(p)
            exit (1)

        property = args[1]
        do_set(qvm_collection, vm, property, args[2:])
        qvm_collection.save()
        qvm_collection.unlock_db()


    else: 
        # do_list
        do_list(vm)

main()